box: introduce system privileges
Add system privileges 'session' and 'usage' * 'session' privilege lets user connect to database server * 'usage' privilege lets user use his/her rights on database objects * Both privileges are assigned to all users by default. Implementation details: * system privileges are special grant rights to 'universe'. Therefore, they can be granted only by admin. Because of this fact, during creation or deletion of user, we have to switch to 'admin' to grant or revoke these rights. Important changes: * changed bootstrap.snap due to need to start admin with new privileges * added auto upgrade script for 1.7.7 Fixes gh-2898. With contributions by @kostja.
Showing
- src/box/alter.cc 24 additions, 4 deletionssrc/box/alter.cc
- src/box/authentication.cc 2 additions, 0 deletionssrc/box/authentication.cc
- src/box/bootstrap.snap 0 additions, 0 deletionssrc/box/bootstrap.snap
- src/box/call.cc 19 additions, 8 deletionssrc/box/call.cc
- src/box/lua/schema.lua 42 additions, 5 deletionssrc/box/lua/schema.lua
- src/box/lua/session.c 3 additions, 0 deletionssrc/box/lua/session.c
- src/box/lua/upgrade.lua 21 additions, 1 deletionsrc/box/lua/upgrade.lua
- src/box/sequence.c 17 additions, 6 deletionssrc/box/sequence.c
- src/box/session.cc 46 additions, 2 deletionssrc/box/session.cc
- src/box/session.h 16 additions, 17 deletionssrc/box/session.h
- src/box/space.c 20 additions, 8 deletionssrc/box/space.c
- src/box/space.h 2 additions, 2 deletionssrc/box/space.h
- test/box-py/bootstrap.result 3 additions, 2 deletionstest/box-py/bootstrap.result
- test/box-tap/session.test.lua 11 additions, 1 deletiontest/box-tap/session.test.lua
- test/box/access.result 133 additions, 7 deletionstest/box/access.result
- test/box/access.test.lua 48 additions, 0 deletionstest/box/access.test.lua
- test/box/access_misc.result 8 additions, 1 deletiontest/box/access_misc.result
- test/box/access_misc.test.lua 2 additions, 0 deletionstest/box/access_misc.test.lua
- test/box/role.result 10 additions, 1 deletiontest/box/role.result
- test/box/role.test.lua 1 addition, 1 deletiontest/box/role.test.lua
Loading
Please register or sign in to comment